support certgen option